Question 1

Which of the following is the BEST tool to perform cloud security control audits?

Options :

A : General Data Protection Regulation (GDPR)

B : Cloud Security Alliance (CSA) Cloud Controls Matrix (CCM)

C : Federal Information Processing Standard (FIPS) 140-2

D : ISO 27001

Answer: B

Question 2

Which of the following is an example of compliance business impact?

Options :

A :

A hacker using a stolen administrator identity brings down the Software as a Service (SaaS) sales and marketing systems, resulting in the inability to process customer orders or manage customer relationships.

B :

A distributed denial of service (DDoS) attack renders the customer’s cloud inaccessible for 24 hours, resulting in millions in lost sales.

C :

While the breach was reported in a timely manner to the CEO, the CFO and CISO blamed each other in public, resulting in a loss of public confidence that led the board to replace all three.

D :

The cloud provider fails to report a breach of customer personal data from an unsecured server, resulting in GDPR fines of 10 million euros.

Answer: C

Question 3

An auditor is assessing a European organization's compliance. Which regulation is suitable if health information needs to be protected?

Options :

A : GDPR

B : DPIA

C : DPA

D : HIPAA

Answer: A

Question 4

Controls implemented as part of a cloud compliance plan need to be adapted depending on changes in the:

Options :

A : key control indicators (KCIs).

B : threat landscape.

C : risk scoring criteria.

D : risk owner expertise.

Answer: B

Question 5

Which of the following is MOST important to manage risk from cloud vendors who might accidentally introduce unnecessary risk to an organization by adding new features to their solutions?

Options :

A : Deploying new features using cloud orchestration tools

B : Performing prior due diligence of the vendor

C : Establishing responsibility in the vendor contract

D : Implementing service level agreements (SLAs) around changes to baseline configurations

Answer: D

Confidently Practice Online with Free CCAK Exam Cram

Buying Options: